Installing 3.5.2 brings references to 3.6.1

[ilg-ul]

Have you read the Contributing Guidelines on issues?

• I have read the Contributing Guidelines on issues.

Prerequisites

• I'm using the latest version of Docusaurus.
• I have tried the npm run clear or yarn clear command.
• I have tried rm -rf node_modules yarn.lock package-lock.json and re-installing packages.
• I have tried creating a repro with https://new.docusaurus.io.
• I have read the console error message carefully (if applicable).

Description

It might be related to #10668.

I have a project template that uses 3.5.2, that I successfully used to instantiate several sites.

Today I tried it again, and it fails, since npm install brings some packages from the 3.6.1 release.

Reproducible demo

No response

Steps to reproduce

Place the following file in an empty folder and issue npm install:

package.json

Expected behavior

Install 3.5.2 packages.

Actual behavior

It installs lots of 3.6.1 packages. See the resulting package-lock.json.

Your environment

• Public source code:
• Public site URL:
• Docusaurus version used: 3.5.2
• Environment name and version (e.g. Chrome 89, Node.js 16.4):
• Operating system and version (e.g. Ubuntu 20.04.2 LTS): macOS 14.6.1

Self-service

• I'd be willing to fix this bug myself.

[ilg-ul]

Oops! It was a mistake in my package.json. :-(